# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1675 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1676 --- ## [Aggregate filter usage](https://discuss.elastic.co/t/aggregate-filter-usage/215744)
**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 3:10pm UTC](https://discuss.elastic.co/t/aggregate-filter-usage/215744 "2020-01-20T15:10:44Z")
Hi Team, I want to write filter to compare current event with previous one. My requirement is as below: Let's say first log has event id as 100, I want to check when the second log comes it should be 1 greater than pre… --- ## [Elastic Cloud custom domain?](https://discuss.elastic.co/t/elastic-cloud-custom-domain/214853)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 3:10pm UTC](https://discuss.elastic.co/t/elastic-cloud-custom-domain/214853 "2020-01-20T15:10:31Z")
When it is going to be possible to have a custom domain for elastic in cloud? like elastic.mydomain.com so that we can embed url in applications and doesnt change and can enable fw rules for that. --- ## [Cannot get input from elasticsearch - logstash terminates itself](https://discuss.elastic.co/t/cannot-get-input-from-elasticsearch-logstash-terminates-itself/215713)
**Author:** [@peter\_pan](https://discuss.elastic.co/u/peter_pan)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 3:08pm UTC](https://discuss.elastic.co/t/cannot-get-input-from-elasticsearch-logstash-terminates-itself/215713 "2020-01-20T15:08:49Z")
Hi ELKers, I would like to ask about your help on the following issue, which it is that I cannot get input from elasticsearch into logstash. My configuration is simple as that in the logstash-simple.conf: input { ela… --- ## [Logstash JDBC strange time convert](https://discuss.elastic.co/t/logstash-jdbc-strange-time-convert/215760)
**Author:** [@GaffaOverflow](https://discuss.elastic.co/u/GaffaOverflow)\ **Replies:** 0\ **Last updated:** [January 20, 2020, 2:51pm UTC](https://discuss.elastic.co/t/logstash-jdbc-strange-time-convert/215760 "2020-01-20T14:51:30Z")
Hi Everyone, Im trying to add Logs vom a MSSQL Database to my ELk-Stack. I had some trouble regarding the Timezone. I want a field with the UTC Time (will be the @timestamp field) i had problems with converting the fi… --- ## [How to make these fields agrregators?](https://discuss.elastic.co/t/how-to-make-these-fields-agrregators/215738)
**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\ **Replies:** 5\ **Last updated:** [January 20, 2020, 2:51pm UTC](https://discuss.elastic.co/t/how-to-make-these-fields-agrregators/215738 "2020-01-20T14:51:54Z")
This is the field list in my index pattern. How to make these fields aggregators? --- ## [REPLACE in scripted field](https://discuss.elastic.co/t/replace-in-scripted-field/215703)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 2:36pm UTC](https://discuss.elastic.co/t/replace-in-scripted-field/215703 "2020-01-20T14:36:35Z")
Hello, I'm trying to convert a string into a number by extracting dots with the help of regexp. Here is the scripted field for this: if (doc\['build.keyword'\].size() != 0) { def m = /\[0-9\]+\\.\[0-9\]+\\.\[0-9\]+\\.\[0-9\]+/… --- ## [How can I remove unwanted parameters in logstash geoip](https://discuss.elastic.co/t/how-can-i-remove-unwanted-parameters-in-logstash-geoip/215673)
**Author:** [@ruranga](https://discuss.elastic.co/u/ruranga)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 2:37pm UTC](https://discuss.elastic.co/t/how-can-i-remove-unwanted-parameters-in-logstash-geoip/215673 "2020-01-20T14:37:41Z")
Hi, Actually I don't need following parameters in logstash geoip out put geoip.city\_name geoip.continent\_code geoip.dma\_code geoip.ip geoip.latitude geoip.location.lat geoip.location.lon geoip.longitude geoip.p… --- ## [Kibana7.5 plugin and visualization development guide](https://discuss.elastic.co/t/kibana7-5-plugin-and-visualization-development-guide/215733)
**Author:** [@zaynkorai](https://discuss.elastic.co/u/zaynkorai)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 2:30pm UTC](https://discuss.elastic.co/t/kibana7-5-plugin-and-visualization-development-guide/215733 "2020-01-20T14:30:52Z")
Hey I am new to Elastic and trying to run this plugin inside my own plugins folder in cloned kibana directory. My goal is embed a visualization of kibana 7.5+ into my plugin and I am now looking for any documentation/st… --- ## [Brute Force Watcher and Alert](https://discuss.elastic.co/t/brute-force-watcher-and-alert/215708)
**Author:** [@mdp](https://discuss.elastic.co/u/mdp)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 2:06pm UTC](https://discuss.elastic.co/t/brute-force-watcher-and-alert/215708 "2020-01-20T14:06:06Z")
Hi, I am looking at support/advice on modifying a watcher to accomplish: A single email and alert output for each occurrence where there a user has failed logins x times in x minutes. The alert and email to contain a … --- ## [Hard regex](https://discuss.elastic.co/t/hard-regex/215714)
**Author:** [@Arnodl](https://discuss.elastic.co/u/Arnodl)\ **Replies:** 4\ **Last updated:** [January 20, 2020, 2:01pm UTC](https://discuss.elastic.co/t/hard-regex/215714 "2020-01-20T14:01:46Z")
hi, i need your help to write regex. It's my e.g message: scc\_check\_file ignored non-ASCII file /etc/sysconfig/auditd: '/etc/sysconfig/auditd: regular file, no read permission' I want to write if, which checks in part … --- ## [How to have a checkpoint using a TimeStamp field (sql\_last\_value)](https://discuss.elastic.co/t/how-to-have-a-checkpoint-using-a-timestamp-field-sql-last-value/215745)
**Author:** [@NaveenSilvester](https://discuss.elastic.co/u/NaveenSilvester)\ **Replies:** 0\ **Last updated:** [January 20, 2020, 1:51pm UTC](https://discuss.elastic.co/t/how-to-have-a-checkpoint-using-a-timestamp-field-sql-last-value/215745 "2020-01-20T13:51:04Z")
Hi ELK community, Here is a challenge that I am facing while tracking a TimeStamp filed in logstash. I am connecting to Postgresql table which has a field named "Recorded\_time" with a datatype TimeStamp. I want to hav… --- ## [Avoid reloading (duplicate) csv records into same index](https://discuss.elastic.co/t/avoid-reloading-duplicate-csv-records-into-same-index/215734)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 1:45pm UTC](https://discuss.elastic.co/t/avoid-reloading-duplicate-csv-records-into-same-index/215734 "2020-01-20T13:45:22Z")
Hi All, I have a working config for loading csv records from logstash to elasticsearch. However when I try to restart the logstash service, the same csv file records are reloaded again into same index and creating dupli… --- ## [How to see how long we can retain the indexes in Curator?](https://discuss.elastic.co/t/how-to-see-how-long-we-can-retain-the-indexes-in-curator/215523)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 1:45pm UTC](https://discuss.elastic.co/t/how-to-see-how-long-we-can-retain-the-indexes-in-curator/215523 "2020-01-20T13:45:10Z")
How can we see how long indexes can be retained for? Can we make a scheduled task for it? How can we maintain an index by looking into freeing up disk space in intervals? 1: action: delete\_indices description: \>- … --- ## [FATAL \[class\_cast\_exception\] class java.lang.String cannot be cast to class java.util.Map](https://discuss.elastic.co/t/fatal-class-cast-exception-class-java-lang-string-cannot-be-cast-to-class-java-util-map/215609)
**Author:** [@Sudarshan013](https://discuss.elastic.co/u/Sudarshan013)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 1:38pm UTC](https://discuss.elastic.co/t/fatal-class-cast-exception-class-java-lang-string-cannot-be-cast-to-class-java-util-map/215609 "2020-01-20T13:38:49Z")
FATAL \[class\_cast\_exception\] class java.lang.String cannot be cast to class java.util.Map (java.lang.String and java.util.Map are in module java.base of loader 'bootstrap') :: {"path":"/.kibana\_task\_manager\_1","query":… --- ## [Kibana Read only dashboard](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 6\ **Last updated:** [January 20, 2020, 1:28pm UTC](https://discuss.elastic.co/t/kibana-read-only-dashboard/214792 "2020-01-20T13:28:03Z")
Hi , I am using ELK 7.1.0 community edition . Would like to enable read only dashboard for the users , Is this feature available in community edition ? I am aware that it's available in ELK Enterprise edition . Than… --- ## [Slowlog performance. could it deteriorate cluster's performance?](https://discuss.elastic.co/t/slowlog-performance-could-it-deteriorate-clusters-performance/215740)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 0\ **Last updated:** [January 20, 2020, 1:11pm UTC](https://discuss.elastic.co/t/slowlog-performance-could-it-deteriorate-clusters-performance/215740 "2020-01-20T13:11:17Z")
hi, currently I'm using the slowlog feature on cluster (3 master, 10 data, 2 coordinating only). These are my settings: "search" : { "slowlog" : { "level" : "trace", "threshold" : { "f… --- ## [The index pattern \\* does not contain any of the following compatible field types: geo\_point](https://discuss.elastic.co/t/the-index-pattern-index-name-does-not-contain-any-of-the-following-compatible-field-types-geo-point/215689)
**Author:** [@ruranga](https://discuss.elastic.co/u/ruranga)\ **Replies:** 11\ **Last updated:** [January 20, 2020, 1:08pm UTC](https://discuss.elastic.co/t/the-index-pattern-index-name-does-not-contain-any-of-the-following-compatible-field-types-geo-point/215689 "2020-01-20T13:08:36Z")
Hi, When I try to create a visualization -\> coordinated map by using geoip i'm getting below error "The index pattern \\* does not contain any of the following compatible field types: geo\_point" But I'm ge… --- ## [Is there any performance impact on Elastic searches when you have a lot of writes on index?](https://discuss.elastic.co/t/is-there-any-performance-impact-on-elastic-searches-when-you-have-a-lot-of-writes-on-index/215687)
**Author:** [@sberthez](https://discuss.elastic.co/u/sberthez)\ **Replies:** 4\ **Last updated:** [January 20, 2020, 1:06pm UTC](https://discuss.elastic.co/t/is-there-any-performance-impact-on-elastic-searches-when-you-have-a-lot-of-writes-on-index/215687 "2020-01-20T13:06:29Z")
Hi, We are currently working on an application using Elastic search and we try to evaluate benefits and constraints on each differents architecture choices related to spreading data on multiple indexes or using a single… --- ## [Output: how to save a field to a pdf file?](https://discuss.elastic.co/t/output-how-to-save-a-field-to-a-pdf-file/211618)
**Author:** [@ITIC](https://discuss.elastic.co/u/ITIC)\ **Replies:** 3\ **Last updated:** [January 20, 2020, 12:39pm UTC](https://discuss.elastic.co/t/output-how-to-save-a-field-to-a-pdf-file/211618 "2020-01-20T12:39:09Z")
Hi there I'm using logstash (docker.elastic.co/logstash/logstash:7.4.0) to ingest data to our open data portal and saving said data to files (.csv, .geojson, etc.). All was well, until we got to one of our data sources… --- ## [What I specify a doc with a field other than '\_id'?](https://discuss.elastic.co/t/what-i-specify-a-doc-with-a-field-other-than-id/215736)
**Author:** [@khalidnajm](https://discuss.elastic.co/u/khalidnajm)\ **Replies:** 0\ **Last updated:** [January 20, 2020, 12:24pm UTC](https://discuss.elastic.co/t/what-i-specify-a-doc-with-a-field-other-than-id/215736 "2020-01-20T12:24:39Z")
In the MLT query, in order to search by document, rather than terms, I know I can specify a document by its \_id. I find tedious, because I have to search for the document within the index and then copy other it's \_id to … --- ## [How to write rolling upgrade IT among versions in elasticsearch project](https://discuss.elastic.co/t/how-to-write-rolling-upgrade-it-among-versions-in-elasticsearch-project/215606)
**Author:** [@kaihong](https://discuss.elastic.co/u/kaihong)\ **Replies:** 3\ **Last updated:** [January 20, 2020, 12:08pm UTC](https://discuss.elastic.co/t/how-to-write-rolling-upgrade-it-among-versions-in-elasticsearch-project/215606 "2020-01-20T12:08:02Z")
Recently I checked out a new branch called 6.7.0\_rc1 with some minor changes in elasticsearch, and I need to write some BWC test cases (UT or IT) to ensure rolling upgrade scenario from 6.7.0 to 6.7.0-rc1. Currently I d… --- ## [Indexing eml files](https://discuss.elastic.co/t/indexing-eml-files/215557)
**Author:** [@ataoumi](https://discuss.elastic.co/u/ataoumi)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 12:03pm UTC](https://discuss.elastic.co/t/indexing-eml-files/215557 "2020-01-20T12:03:01Z")
Hi Everyone, I'm trying to index eml files and I'm not very excited by converting my files to HTML or other formats already supported. Any tips or suggestions Cheers --- ## [Dotnet APM not displaying data on the span chart](https://discuss.elastic.co/t/dotnet-apm-not-displaying-data-on-the-span-chart/215719)
**Author:** [@asmutti](https://discuss.elastic.co/u/asmutti)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 11:56am UTC](https://discuss.elastic.co/t/dotnet-apm-not-displaying-data-on-the-span-chart/215719 "2020-01-20T11:56:27Z")
Kibana version: 7.5.1 Elasticsearch version: 7.5.1 APM Server version: 7.5.1 APM Agent language and version: dotnet 1.2.0 Browser version: Chrome Is there any extra config that I must set up to show the span data? … --- ## [Working with changing sets of synonyms](https://discuss.elastic.co/t/working-with-changing-sets-of-synonyms/215334)
**Author:** [@ivanibash](https://discuss.elastic.co/u/ivanibash)\ **Replies:** 9\ **Last updated:** [January 20, 2020, 11:37am UTC](https://discuss.elastic.co/t/working-with-changing-sets-of-synonyms/215334 "2020-01-20T11:37:36Z")
Hi, in our search case we have several sets of synonyms that we want to apply in different combinations dynamically (at query time). I read this article that talks about search\_analyzer, but I believe for out use case we… --- ## [Elasticsearch has stopped and no longer works](https://discuss.elastic.co/t/elasticsearch-has-stopped-and-no-longer-works/215653)
**Author:** [@4y555](https://discuss.elastic.co/u/4y555)\ **Replies:** 5\ **Last updated:** [January 20, 2020, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-has-stopped-and-no-longer-works/215653 "2020-01-20T11:10:00Z")
Hi guys I was using Elasticsearch (with the nextcloud), but the elastic just stopped after a while. Try to install other versions or reinstall the same version, but it doesn't work. Can you help me? Thank you very muc… --- ## [More input based on first input(Multiple pipelines?)](https://discuss.elastic.co/t/more-input-based-on-first-input-multiple-pipelines/215442)
**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\ **Replies:** 7\ **Last updated:** [January 20, 2020, 11:05am UTC](https://discuss.elastic.co/t/more-input-based-on-first-input-multiple-pipelines/215442 "2020-01-20T11:05:03Z")
I am currently looking to build a solution, where I can load input based on some other input. So my setup is that I have two inputs: The data I need The timestamp of the latest update of this data I only want to get t… --- ## [Cloning Index](https://discuss.elastic.co/t/cloning-index/215716)
**Author:** [@SpinDORK](https://discuss.elastic.co/u/SpinDORK)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 11:02am UTC](https://discuss.elastic.co/t/cloning-index/215716 "2020-01-20T11:02:11Z")
Hi, When I'm trying to clone an index with data, I've been getting errors, if I run this; POST /logflow-2019.11/\_clone/robot-dsa\_2 { "settings": { "index.number\_of\_shards": 5 }, "aliases": { "my\_search\_in… --- ## [GKE Upgrade and PDB](https://discuss.elastic.co/t/gke-upgrade-and-pdb/215661)
**Author:** [@Vincent\_Ngai](https://discuss.elastic.co/u/Vincent_Ngai)\ **Replies:** 7\ **Last updated:** [January 20, 2020, 11:00am UTC](https://discuss.elastic.co/t/gke-upgrade-and-pdb/215661 "2020-01-20T11:00:53Z")
Hey Guys, I am install my ECK on GKE as you may know GKE provide a method for cluster auto upgrade or no matter as a normal upgrade for node pool (it does 1 by 1 in each zone) if we setup PDB , it will follow the rule… --- ## [Stratégie insertion](https://discuss.elastic.co/t/strategie-insertion/215614)
**Author:** [@naguelfar](https://discuss.elastic.co/u/naguelfar)\ **Replies:** 7\ **Last updated:** [January 20, 2020, 10:50am UTC](https://discuss.elastic.co/t/strategie-insertion/215614 "2020-01-20T10:50:05Z")
Bonjour, voici mon problème : J'ai des données issues d'un fichier type CSV avec des clients et des commandes. L'index Elastic est sous la forme suivante : Un client qui a des commandes qui ont des lignes de commandes. … --- ## [List indices with shards on a given node](https://discuss.elastic.co/t/list-indices-with-shards-on-a-given-node/215486)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 1\ **Last updated:** [January 20, 2020, 10:35am UTC](https://discuss.elastic.co/t/list-indices-with-shards-on-a-given-node/215486 "2020-01-20T10:35:50Z")
Elasticsearch 6. Is there a nice way to get a list of indices shards of which are on a given node? The only way I can find is to call \_cat/shards and grep the output for the node name. Node information in Kibana Monitor… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1674) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1676)